• last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
reduced verbosity

minor cleanup: prefer list_of_lists, improved comments

improved souce code documentation

    • -1
    • +7
    ./packages/acs-tcl/tcl/acs-db-12-procs.tcl
Various fixes for "function_args"

- The default value for "authority_id" in acs_user__new was missing.

- Removed leftovers from earlier changes in the SQL API. The update

scripts did not care about function args, so orphaned entries could

cause confusions.

- The drop-package SQL function did not care about deleting entries on

the function args table. The function args deleted here are created

automatically by the Tcl proc "package_generate_body".

- bumped verison of acs-kernel to 5.10.1b6

file upgrade-5.10.1b5-5.10.1b6.sql was initially added on branch oacs-5-10.

removed calls to deprecated procs

swithc default to version 7.3.0 (previous version was vulnerable)

added link to snyk advisor (bumped version to 5.10.1b9)

    • -1
    • +2
    ./packages/acs-tcl/lib/check-installed.adp
    • -0
    • +1
    ./packages/acs-tcl/lib/check-installed.tcl
    • -2
    • +6
    ./packages/acs-tcl/tcl/utilities-procs.tcl
align .adp files for site-wide admin pages

    • -4
    • +0
    ./packages/xowiki/www/sitewide-admin/index.adp
reduced verbosity

Simplified and streamlined URN management by using util::resources::register_urns

provide a stable order of list items by sorting

    • -1
    • +1
    ./packages/acs-admin/www/posture-overview.tcl
Simplified and streamlined URN management by using util::resources::register_urns

    • -20
    • +3
    ./packages/fa-icons/tcl/resource-init.tcl
    • -1
    • +3
    ./packages/fa-icons/tcl/resource-procs.tcl
    • -1
    • +1
    ./packages/highcharts/tcl/resource-init.tcl
    • -41
    • +11
    ./packages/highcharts/tcl/resource-procs.tcl
Provide better coverage of used JavaScript libraries

- Added support for jquery, jquery-ui, jqueryui_touchpunch

- For all covered JavaScript libraries, the following components were added:

* parameter configuration (param_info)

* vulnerability checks

- site-wide info can manage now:

bootstrap-treeview, jquery, jquery-ui, and jqueryui-touch-punch

- fallback libraries (e.g. for bootstrap3 or yui) are not covered,

these should disappear in the future.

- bumped version number to 5.10.1b14

    • -2
    • +242
    ./packages/xowiki/tcl/resource-info-procs.tcl
    • -15
    • +2
    ./packages/xowiki/tcl/resource-init.tcl
    • -2
    • +28
    ./packages/xowiki/www/sitewide-admin/index.adp
    • -5
    • +21
    ./packages/xowiki/www/sitewide-admin/index.tcl
Further simplify handling of resource_info specs

- Added convenience function "::util::resources::register_urns" to

register all URNs with CSP handling provided by a package (denoted

by its top level namespace)

- made parameter "version" in "check-installed" include optional

- bumped version number to 5.10.1b8

    • -0
    • +3
    ./packages/acs-tcl/lib/check-installed.tcl
    • -1
    • +25
    ./packages/acs-tcl/tcl/utilities-procs.tcl
added link to "Security and Privacy Posture Overview" to acs-admin page

improved robustness, when cluster parameters are changed without a restart

    • -0
    • +11
    ./packages/acs-admin/www/cluster.tcl
reduced verbosity

reduced verbosity in the system log, provide hint to message

    • -2
    • +14
    ./packages/acs-tcl/tcl/01-database-procs.tcl
fixed bug #3470

Fixed issue in cluster mode, denoted by Khy H in the OpenACS forum

A new command "ad_parameter_cache_flush_dict" was introduced to handle

the case, where a cluster node modifies a parameter value without

having it read before. This case could lead to a coherency problem for

parameter values.

Background:

This proc is necessary in cases, where a node writes a new

parameter value before it has read the old one.

Since a plain "nsv_dict unset ad_param $key $parameter_name"

raises an exception, when the pair does not exist, and we do

not want to allow in cluster requests arbitrary "catch"

commands, we allow "ad_parameter_cache_flush_dict" instead.

Probably, the best solution is to add support for

nsv_dict unset -nocomplain -- ad_param $key $parameter_nam

The existing nsv_dict was built after Tcl's "dict unset",

which does not have the "-nocomplain" option either. However,

an atomic operation would certainly be preferable over an exists/unset

pair, which is no acceptable solution.

For details, see https://openacs.org/forums/message-view?message_id=5822470

    • -4
    • +5
    ./packages/acs-tcl/tcl/cluster-procs.tcl
    • -4
    • +29
    ./packages/acs-tcl/tcl/defs-procs.tcl
use generic mount icon in site map

    • -3
    • +3
    ./packages/acs-subsite/acs-subsite.info
added generic icon for "mount" operations

    • -1
    • +6
    ./packages/acs-templating/tcl/style-procs.tcl
added after-mount callback to restrict default permissions

- Modify default permissions after mount to restrict read access to

the package from public read to read access for registered users.

- The change affects only fresh installed, existing permission settings

are not touched.

- fixed typos

- bumped version number to 5.10.1b3

    • -1
    • +25
    ./packages/acs-lang/tcl/apm-callback-procs.tcl
provide posture overview for widely-accessible-packages when count == 1

    • -0
    • +51
    ./packages/acs-admin/tcl/acs-admin-procs.tcl
    • -43
    • +13
    ./packages/acs-admin/www/posture-overview.tcl
Fix documentation for group::update.

    • -2
    • +2
    ./packages/acs-subsite/tcl/group-procs.tcl
provide icon and title for managing service parameters

perform proper cleanup after regressin test

use a different icon for mounting, reduced verbosity

xotcl-request-monitor Change site-node permissions after mount

This package might reveal internal information and should

not be public available per default.

bumped version number to 0.66